Yes, this is what we are expirimenting with. It won't make it into the first release as its to unstable and not userfriendly in the least. I am probably going to contact the Qubes OS Team and work with them on it or at least get some tips from them.

As per this VPN Bypass it looks like a malware app must be installed. While I will definately pull any patches that google may release into Guardian Rom, I don't see this as a huge issue. Watch what you install and you should be fine. If you install malware (regardless of this attack) your phone is compromised.

With that said VM's would limit this. As long as Dom0 isn't compromised your VPN can't be bypassed. Once a PoC is released or at least more details I will test it against Guardian Rom.